Put work items in the state store, and bind the log to them (M1.1)

Development Plan M1.1, as discussed.

- Schema v4: a work_items table (id, scope, title, status, outcome,
  position, data) and an agent row whose active_item points at one
  (NULL: idle). Canonical events and intents carry their work item, and
  events their actor. Older stores are refused with a clear message:
  there was no production data, so no migration (the mechanism stays).
- The log is reached through a Transcript bound to one work item and
  one actor: store.transcript(item, actor) reads only that item and
  writes with both. The planner, executor, delegation and expert desk
  get one per call from the orchestrator instead of holding the store,
  so a component can neither read another task's events (the planner
  read every earlier task's, #78) nor write without attribution.
  store.all_events() is kept for readers that span items (evaluation
  capture, dumps). Intents are begun through the transcript or with
  work_item=, so each belongs to its item.
- The orchestrator opens a work item on 'use', closes it with its
  outcome (completed or abandoned), and carries what the operator said
  while idle into the new item as copies with their origin, so a task
  sent before 'use' is still planned from (D1). control.py keeps its
  state machine through get_state()/transition(), now over the active
  work item, until M2.6 retires it.
- nisse_dev.dump shows work items and each event's item and actor.

Tests: test_work_items.py (scoping, attribution, intent ownership,
restart, outcomes, carried messages, a second task never seeing the
first); the suites updated for the per-call transcript.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PPQ14L3LikyefCMFBqEbKE

nisse-dev/tests/test_quint_counterexamples.py

@@ -104,7 +104,7 @@ class Executor:
     def __init__(self) -> None:
         self.outcome = ExecutorOutcome("completed", "done")
 
-    def run(self, milestone: int) -> ExecutorOutcome:
+    def run(self, transcript: object, milestone: int) -> ExecutorOutcome:
         return self.outcome
 
 
@@ -283,7 +283,7 @@ def test_crash_during_a_review_loses_the_comment(tmp_path: Path) -> None:
     class Crash(BaseException):
         pass
 
-    def dies(milestone: int) -> ExecutorOutcome:
+    def dies(transcript: object, milestone: int) -> ExecutorOutcome:
         raise Crash()  # the process dies mid-review
 
     agent.executor.run = dies  # type: ignore[method-assign]
@@ -348,7 +348,7 @@ class Crash(BaseException):
 
 
 def crash_mid_review(agent: Agent, gitea: FakeGitea) -> None:
-    def dies(milestone: int) -> ExecutorOutcome:
+    def dies(transcript: object, milestone: int) -> ExecutorOutcome:
         raise Crash()
 
     agent.executor.run = dies  # type: ignore[method-assign]
@@ -377,7 +377,7 @@ def test_an_executor_error_answers_the_comment_so_it_is_not_redelivered(
     agent.say("use demo", "approve", "approve", "start milestone 1")
     gitea.add(20, "don", "please add a test")
 
-    def fails(milestone: int) -> ExecutorOutcome:
+    def fails(transcript: object, milestone: int) -> ExecutorOutcome:
         raise RuntimeError("bug in the executor")
 
     agent.executor.run = fails  # type: ignore[method-assign]